CVE-2012-0185 Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a cr...
HighCVSS 9.3
EPSS 24.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Heap-based buffer overflow in Microsoft Excel 2007 SP2 and SP3 and 2010 Gold and SP1, Excel Viewer, and Office Compatibility Pack SP2 and SP3 allows remote attackers to execute arbitrary code via a crafted spreadsheet that triggers incorrect handling of memory during opening, aka "Excel MergeCells Record Heap Overflow Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft excel | = 2007-sp2 | No fix listed |
| Microsoft excel | = 2007-sp3 | No fix listed |
| Microsoft excel | = 2010 | No fix listed |
| Microsoft excel | = 2010-sp1 | No fix listed |
| Microsoft excel viewer | All versions | No fix listed |
| Microsoft office compatibility pack | All versions | No fix listed |
References
- 49112 third-party-advisory
- 1027041 vdb-entry
- TA12-129A third-party-advisory us-government-resource
- MS12-030 vendor-advisory
- ms-excel-mergecells-bo(75118) vdb-entry
- oval:org.mitre.oval:def:14738 signature vdb-entry